Hide Netlogon/SysVol folder

60 pts.
Microsoft Windows Server 2003
Microsoft Windows XP
Windows 2000 Server
Hi We have a windows 2003 service domain and want to hide the netlogon and sysvol from clients, If I change the permission then the logon scripts don't work anymore as it can't execute the scripts. How do I hide these folders from all domain users? Thanks

Answer Wiki

Thanks. We'll let you know when a new response is added.

You can’t hide these folders. They need to be left alone with the permissions unchanged for your domain to continue to function. In addition to these folders being used by the logon scripts these folders are also used by active directory to replicate data between domain controllers.

This was asked in another question (here) as well recently, essentially these folders are defaulted to read only for authenticated users and provide login script access and group policy access to client machines and users.

Additionally, this folder provides the means for domain controllers to synchronize with each other via replication.

You should only place things in this folder that are readable by everyone. You really do not want these folders removed, hidden, or renamed. If you need to share sensitive information, creation of another shared folder, with appropriate permissions, is recommended.

Discuss This Question: 2  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Jerry Lees
    Looks like after my addition to Mrdenny's answer I found the other question and you were the one asking that one as well. May I ask why you believe you want to do this, so I can possibly offer you a different solution that will meat your needs without breaking active directory?
    5,335 pointsBadges:
  • ScratchMan
    I will add to the discussion as a possible reason to do this. I would like to add a DFS share to the domain namespace to use as an user fileserver space. Drive mappings and things should go directly to the share \domainshare but I would like to clean up the look of \domain if and when a user desides to go there after seeing \domainshare in their address bar. Suggestions?
    10 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: